Indonesia Business Licensing Requirements: A Foreign Company Checklist

Key Takeaways

• Start with the operating model and the correct KBLI activities, not with the OSS application screen.
• Check whether each proposed activity is open to foreign investment and whether sector-specific conditions apply.
• The OSS system determines licensing outputs for each activity and project using risk, scale, location and other submitted data.
• An NIB is a core business identity and registration output, but it is not universal proof that every activity may operate immediately.
• Medium-risk and high-risk activities can require a Standard Certificate or licence, while supporting approvals may also apply.
• Location, environmental, building, product, import, workforce and sector requirements must be coordinated with the main business licence.
• Use a readiness matrix for each KBLI and location so that an issued document is not mistaken for completed operating readiness.

What Are Indonesia’s Business Licensing Requirements for a Foreign Company?

At a practical level, a foreign investor should verify six connected layers: an eligible Indonesian legal presence, accurate corporate data, suitable KBLI business classifications, foreign-investment eligibility, risk-based licensing outputs, and any supporting approvals needed for the actual site, products, people and operating model. The required documents are therefore project-specific rather than a fixed bundle that applies to every foreign-owned company.

Indonesia’s current risk-based licensing framework is established by Government Regulation No. 28 of 2025. Its scope covers basic requirements, business licensing, supporting business licences known as PB UMKU, OSS services, supervision and sanctions. The regulation replaced Government Regulation No. 5 of 2021, so checklists still built around the older regulation should be refreshed.

For most foreign direct-investment projects, the licensing analysis is closely linked to the PT PMA structure. Businesses can review IndoGateway’s verified guidance on PT PMA company registration and its dedicated NIB and OSS business licensing service when coordinating the corporate and licensing workstreams.

Foreign Company Licensing Checklist at a Glance

Step 1: Define the Activities the Indonesian Business Will Actually Perform

A reliable licence checklist starts with facts. Describe what the Indonesian company will sell, manufacture, import, distribute, install, operate or support. Identify who signs customer contracts, receives revenue, owns inventory, employs staff and controls each facility. A broad group description such as “technology,” “consulting” or “trading” is rarely precise enough for licensing analysis.

Separate core revenue activities from supporting functions. A company that sells equipment may also import it, warehouse it, install it, provide after-sales service and operate digital systems. These functions should not automatically be treated as one activity. Each material function should be tested against the relevant KBLI description and the current sector rules.

This operating-model exercise also helps prevent over-registration. Adding loosely related activities can create unnecessary licensing, reporting or capital-planning complications. Omitting a material activity can leave a gap between the company’s legal scope and what it does in practice.

Step 2: Select and Validate the Current KBLI Codes

KBLI is Indonesia’s standard classification of economic activities. BPS issued KBLI 2025 through BPS Regulation No. 7 of 2025. BPS subsequently issued Regulation No. 6 of 2026 to amend selected descriptions, making a current code-and-description check important.

Do not select a code from its short label alone. Read the complete description, inclusions and exclusions, then compare them with the company’s planned transactions and operational responsibilities. Where a 2020 code maps to several 2025 codes, the correct result depends on the substance of the activity; a conversion table is a research aid, not a substitute for classification analysis.

The selected activities should align across the company’s deed and purposes, AHU records where relevant, OSS data, project details and sector applications. Existing companies planning a new activity should assess whether their corporate documents and registered scope require amendment before or alongside the OSS change. IndoGateway’s Indonesia licence checker can support an initial activity review, but final requirements should still be validated for the project.

Step 3: Confirm Foreign-Investment Eligibility for Every Activity

Foreign ownership should be checked at activity level. Presidential Regulation No. 10 of 2021, as amended by Presidential Regulation No. 49 of 2021, organizes investment fields into categories that include priority fields, activities allocated to or requiring partnership with cooperatives and micro, small and medium enterprises, activities with specified conditions, and other activities open to investors. Sector legislation can add further conditions.

Do not assume that one permitted activity makes every other code in the company eligible for the same shareholding structure. Review each proposed KBLI against the current investment-field framework and the competent sector authority’s rules. Also confirm whether the intended legal presence is permitted to earn revenue and carry out the activity. A representative office, for example, should not be treated as interchangeable with an operating PT PMA.

The output of this step is an activity eligibility matrix showing the proposed code, activity description, intended ownership, any applicable condition and the source used for verification. Any unclear or conditional activity should be resolved before incorporation documents and commercial commitments are finalized.

Step 4: Align Corporate, Tax and OSS Data

OSS relies on connected business data. Prepare the company’s legal name, address, deed and approval details, tax identity, shareholders, directors and commissioners, contact details, business activities and project information. Depending on the application, project data may include location, investment values, workforce, land or facility details, capacity and other activity-specific information.

Use a controlled source file rather than entering data from memory. Names, addresses and identity details should match the authoritative corporate and tax records. The activity scope in the deed should support what is being submitted. Project values should be internally reconciled with the company’s investment plan and finance assumptions. If the company has already been established, resolve outdated corporate or beneficial-ownership data before it becomes a licensing bottleneck.

A foreign investor should also decide who owns the OSS account and who may act through it. Keep access with authorized personnel, use individual credentials appropriately, maintain multi-factor authentication, and establish an internal approval trail for submissions and declarations. An adviser can support the process, but the company should retain governance over its data and issued licences.

Step 5: Identify the Risk-Based Licence for Each Project

Under the risk-based framework, the relevant output is determined for the business activity and project rather than merely for the company as a whole. The formal tiers are low, medium-low, medium-high and high. Low-risk activities generally rely on the NIB as the principal business-licensing instrument. Medium-risk activities involve the NIB and a Standard Certificate, with the method of satisfying or verifying the standard depending on the tier and applicable rules. High-risk activities involve the NIB and a licence, and some activities may also have standards to meet.

The business should not assign its own risk tier from intuition. Confirm the result in the current regulatory appendix and OSS data for the precise KBLI, business scale and project characteristics. Similar-sounding activities can have different classifications, and the same company may therefore hold several combinations of licensing outputs.

Create one row per KBLI and location in a licensing matrix. Record the OSS-assigned risk level, required instrument, current status, outstanding verification and authority involved. This provides a clearer operating picture than simply storing a copy of the NIB.

Step 6: Check Location, Environmental and Building Readiness

Core licensing and site readiness must be coordinated. Depending on the activity, location, scale and physical project, the company may need to address spatial-use conformity, environmental approval and building-related requirements. The applicable route depends on the planned land use, environmental impact, premises, development status and sector.

Do not sign a long-term lease, acquire land or commit to construction based only on a promising commercial location. First test whether the intended activity is compatible with the site and whether the premises can support the required environmental, technical and building position. A serviced office may be workable for some administrative or service activities but unsuitable for warehousing, production, clinical, laboratory or other physical operations.

For projects with environmental implications, determine the applicable document and approval route from the project’s actual characteristics. IndoGateway’s guide to AMDAL and environmental business requirements provides useful context, while facility-specific conclusions should be confirmed with current technical information.

Step 7: Map Supporting and Sector-Specific Approvals

The main risk-based business licence may not complete the company’s regulatory position. PB UMKU and sector approvals can support functions or regulated products connected with the business. The exact list may depend on what the company imports, manufactures, distributes, stores, advertises, installs or sells, and on whether it operates regulated facilities or uses controlled materials.

Build separate workstreams where relevant:

• importer registration, customs access and product-specific import controls;
• product registration, certification, labelling or market authorization;
• industrial, construction, transport, energy, health, digital or other sector licences;
• environmental, hazardous-material or waste-management requirements;
• foreign-worker planning, immigration status and employer obligations; and
• tax registrations, invoicing readiness and periodic compliance.

Use import and product compliance support, sector-licensing support and visa and workforce services as starting points for these connected requirements. The objective is not to collect approvals indiscriminately; it is to identify those tied to the actual operating model.

Step 8: Verify Operating Readiness Before Launch

Before invoicing, importing, producing, opening a site or delivering regulated services, compare the planned launch activity with the status of every relevant approval. Confirm whether a Standard Certificate is self-declared or requires verification, whether a licence is issued and effective, and whether any commitments or technical standards remain outstanding. Check that the specific location and project appear correctly in the system.

The readiness review should include supporting approvals, product status, environmental and premises requirements, tax setup, employment arrangements and internal operating procedures. Capture evidence in a controlled licence register with document numbers, issuing authorities, scope, locations, conditions, renewal or reporting triggers, accountable owners and links to the underlying files.

Management should approve launch only when the matrix demonstrates that the intended activity can begin under the applicable requirements. This creates a defensible decision process and reduces the risk of treating document issuance as the end of implementation.

Documents and Information to Prepare

The exact evidence depends on the company and application, but a well-organized preparation file usually covers the following information categories:

• corporate deed, amendments and Ministry of Law approvals or notifications;
• shareholder, director, commissioner and beneficial-ownership information;
• tax identification and registered-address records;
• a plain-language operating model and transaction flow;
• the KBLI analysis and foreign-investment eligibility matrix;
• project locations, land or premises documents and site-use information;
• investment, capital, capacity and workforce planning data;
• environmental and building information where relevant;
• product, import, technical and sector documents; and
• authorized-user, submission and internal approval records.

This is a planning list rather than a universal filing list. OSS and the competent authority may require different data for different activities. Prepare documents in the required language and format, and verify whether foreign-issued documents require translation, legalization or another authentication route before relying on them.

Common Licensing Mistakes Foreign Companies Should Avoid

Choosing KBLI Codes From Marketing Language

A website description may not match the legal classification. Classify the transaction and operational responsibility, then document why the chosen code fits.

Checking Foreign Ownership Only at Company Level

Eligibility can differ by activity. Review every material KBLI and any sector condition before fixing the shareholding structure.

Treating the NIB as a Universal Operating Licence

The NIB is essential, but the activity may also depend on a Standard Certificate, licence, basic requirement or supporting approval. Read the complete OSS output and status.

Using One Project Record for Distinct Locations

Licensing and supporting requirements can be location-specific. Map every site and function rather than assuming one approved office covers all facilities.

Leaving Product and Import Work Until the End

A company can be incorporated while its products or import route remain unready. Start these assessments early enough to influence the entity, importer and supply-chain model.

Ignoring Post-Issuance Obligations

Declarations, standards, reporting, supervision and data-change duties can continue after issuance. Assign accountable owners and maintain a compliance calendar.

A Practical 30-60-90 Day Planning Sequence

First 30 Days: Design and Validate

Document the operating model, select candidate KBLI codes, test foreign-investment eligibility, choose the legal-presence route and identify critical site, product, import and workforce dependencies. Escalate uncertain classifications before they affect incorporation or contracts.

Days 31-60: Establish and Submit

Complete the necessary corporate work, reconcile tax and corporate data, prepare project details, establish authorized OSS access and submit the appropriate applications. Progress supporting approval workstreams in parallel where their prerequisites allow it.

Days 61-90: Verify and Operationalize

Track verification or authority review, close outstanding standards and site requirements, prepare internal controls and build the licence register. Conduct a final launch review against the actual products, locations, personnel and transactions. The timing of government or technical processes is project-dependent, so these periods should be treated as management phases rather than guaranteed approval timelines.

Frequently Asked Questions

1. What is the minimum business licence a foreign-owned company needs in Indonesia?

There is no single minimum document that proves every foreign-owned company is ready to operate. An NIB is a central registration and business identity output, but the complete licensing position depends on each KBLI activity, its risk level, the project location and the operating model. A medium-risk activity may involve a Standard Certificate, while a high-risk activity may require a licence. Spatial, environmental, building, product, import, sector or workforce approvals may also apply. The correct minimum should therefore be assessed for every activity and location, not inferred from the company name alone.

2. Can a foreign company obtain an NIB without forming a PT PMA?

The answer depends on the permitted legal presence and the activity being registered. A PT PMA is a common route for foreign direct investment and commercial operations, but Indonesia also recognizes other forms for specific purposes, including certain representative-office structures. Those structures are not interchangeable: their permitted scope, revenue activity and sector conditions can differ. The company should first establish what it intends to do in Indonesia, then confirm which legal form is eligible and how that form is handled in OSS. Do not choose a representative route solely because it appears administratively lighter.

3. Does an NIB allow a foreign company to start operating immediately?

Not in every case. The NIB may be the principal business-licensing instrument for a low-risk activity, but other activities can require a Standard Certificate, a verified status, a licence or additional supporting approvals before the relevant operation begins. Site, environmental, building, product and import requirements may also affect launch readiness. Review the OSS output for each KBLI and project, including statuses and commitments, rather than relying on the existence of the NIB alone. A documented pre-launch review is the safest way to connect the issued documents with the activity the company plans to perform.

4. How many KBLI codes can a PT PMA register?

A PT PMA can have more than one business activity where the combination is supported by its corporate scope and each activity is legally and operationally appropriate. The practical question is not simply how many codes can be entered. Each code should describe a real or planned activity and must be checked for foreign-investment eligibility, risk-based licensing, project and location requirements, and relevant sector conditions. Unrelated or speculative codes can complicate compliance and obscure the company’s main business. Use an activity matrix to justify each code and its relationship to the operating model.

5. Are Indonesia business licensing requirements the same in every province?

The national OSS and risk-based framework provides a common system, but project requirements can still vary with location and local conditions. Spatial-use conformity, environmental documents, building status, regional authority involvement and technical infrastructure may differ by site. Sector rules can also assign roles to central or regional authorities. A licence associated with one project location should not automatically be treated as covering another facility. Foreign investors should complete site due diligence before committing to premises and should map each office, warehouse, factory, outlet or project site to the activities performed there.

6. What supporting licences might a foreign company need after the NIB?

Supporting requirements depend on the business model. They may include PB UMKU, product registration or certification, import and customs permissions, sector licences, environmental approvals, building-related requirements, foreign-worker and immigration processes, or other technical approvals. A distributor of regulated goods will have a different roadmap from a consulting company, manufacturer or digital operator. Start with a transaction and facility map, then test each regulated function against the current official rules. Avoid copying another company’s licence list because differences in KBLI, products, locations and supply-chain roles can change the result.

7. How long does business licensing take in Indonesia?

There is no reliable universal timeline. The duration depends on the legal entity’s readiness, data quality, KBLI and risk level, whether standards require verification, the responsible authority, site and environmental work, product or sector approvals, and whether the application needs correction. Some registration outputs can be system-generated once valid data and declarations are submitted, while technical approvals may involve document review or verification. Plan the work by dependencies rather than a single promised completion date, and avoid making commercial launch commitments until the required statuses for the actual activity are confirmed.

8. What should an existing foreign company review when adding a new activity?

First confirm that the new activity fits the company’s intended transactions and select the current KBLI description. Then check foreign-investment eligibility, the company’s deed and registered purposes, the OSS risk level, project location, capital and investment data, sector rules and any supporting product, import, environmental or workforce requirements. A substantive expansion may require corporate and OSS changes rather than a simple code update. The company should also assess whether its premises, systems, personnel and compliance owners can support the activity before launch. Record the decision and update the licence register when approvals are issued.

Conclusion

Indonesia business licensing requirements are manageable when they are treated as an integrated implementation project. Define the business model, select the correct KBLI activities, verify foreign-investment eligibility, align corporate and OSS data, identify the risk-based output for every project, and coordinate site and supporting approvals. The result should be a documented operating-readiness position, not merely a collection of certificates.

Regulatory note: Indonesian investment, licensing, tax, immigration, product, environmental and operating requirements may change and may depend on the business activity, ownership structure, location, products and project circumstances. This article provides general information and is not project-specific legal, tax or regulatory advice. Applicable requirements should be verified before implementation.

Build a Licensing Roadmap for Your Indonesia Operations

IndoGateway can help connect your entity, KBLI, OSS, site and supporting approval workstreams into one practical roadmap. Contact IndoGateway to review the planned activities, ownership, locations, products and operating model before applications or launch decisions are made.